remove all references to XFORMS_POST_URL
move auth_context into initial form creation

keeps us from having to save twice
move form processing in from receiver

and make it happen before first save

removes a GET and a PUT